Avoid and report phishing emails

A phishing attack happens when someone tries to trick you into sharing personal information online.

What phishing is?

Phishing is usually done through email, ads, or by sites that look similar to sites you already use. For example, someone who is phishing might send you an email that looks like it's from your bank so that you'll give them information about your bank account.

Phishing emails or sites might ask for:

Usernames and passwords, including password changes
Social Security numbers
Bank account numbers
PINs (Personal Identification Numbers)
Credit card numbers
Your mother’s maiden name
Your birthday

When we identify that an email may be phishing or suspicious, we might show a warning or move the email to Spam. If an email wasn't marked correctly, follow the steps below to mark or unmark it as phishing.

Report a phishing email in Google:

1.On a computer, go to Gmail.
2.Open the message.
3.Next to Reply arrow, click the three vertical buttons for more options.
4.Click Report phishing.

Report a message as phishing in Outlook:

In the message list, select the message or messages you want to report.

Above the reading pane, select Junk > Phishing > Report to report the message sender.